VULNERABILITY INTELLIGENCE

CVE-2008-6559

CVSS score7.2 HIGH
EPSS probability0.80%
CISA KEVNot currently listed
Published2009-03-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references